OpenBSD LibreSSL resource management error vulnerability

OpenBSD LibreSSL versions 4.4.0 and earlier contain a resource management error vulnerability. This vulnerability arises because malicious OCSP responders can send unbounded HTTP response headers or body data to httpheadread and httpbodyread, thereby exhausting memory and causing the certificate...

OpenBSD LibreSSL input validation error vulnerability

OpenBSD LibreSSL versions 4.4.0 and earlier contain an input validation error vulnerability. This vulnerability arises because url2host fails to reject control characters when copying paths, and httpopen incorporates them into POST request lines. Attackers can embed CR/LF sequences within the AIA...